TI-2026-36017 CVE-2026-48746 · GHSA-94f4-hr76-p5j6
vLLM: OpenAI auth bypass
Priority HIGH 78
vLLM is an inference and serving engine for large language models (LLMs).
RHSA-2026:36005
Red Hat AI Inference Server 3.2.2 (CUDA)
Released 2026-07-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
Fixes 12 records
TI-2026-21378 CVE-2026-26740 · GHSA-g43h-fmhp-fvff
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a…
Priority HIGH 75
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated si…
TI-2026-26211 CVE-2026-33845 · GHSA-cmj5-x3xf-69wq
Gnutls: gnutls: denial of service via dtls zero-length fragment
Priority MEDIUM 49
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read.
TI-2026-30398 CVE-2026-42010 · GHSA-m3r7-xjq8-gc4r
Gnutls: gnutls: authentication bypass via nul character in username
Priority MEDIUM 44
A flaw was found in gnutls.
TI-2026-30397 CVE-2026-42009 · GHSA-9gx7-g5hv-xjjj
Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
Priority MEDIUM 42
A flaw was found in gnutls.
TI-2026-26212 CVE-2026-33846 · GHSA-qcj7-gqxf-2cqq
Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
Priority MEDIUM 41
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS.
TI-2026-39183 CVE-2026-54283 · GHSA-82w8-qh3p-5jfq
Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS
Priority LOW 39
Starlette is a lightweight ASGI framework/toolkit.
Priority LOW 38
Vim is an open source, command line text editor.
TI-2026-39138 CVE-2026-54235 · GHSA-7h4p-rffg-7823
vLLM: temperature=NaN and temperature=Infinity bypass validation and propagate to GPU kernels
Priority LOW 37
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-30106 CVE-2026-41523 · GHSA-q8gq-377p-jq3r
vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
Priority LOW 37
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-27000 CVE-2026-34756 · GHSA-3mwp-wvh9-7528
vLLM Affected by Unauthenticated OOM Denial of Service via Unbounded `n` Parameter in OpenAI API Server
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).
TI-2026-26999 CVE-2026-34755 · GHSA-pq5c-rjhq-qp7p
vLLM Affected by Denial of Service via Unbounded Frame Count in video/jpeg Base64 Processing
Priority LOW 29
vLLM is an inference and serving engine for large language models (LLMs).